PoC for CVE-2026-87902 — unauthenticated path traversal in WordPress page-template resolution (local PHP inclusion, conditional RCE) with a pinned vulnerable lab
☆45Sep 22, 2026Updated last month
Alternatives and similar repositories for cve-2026-87902-poc
Users that are interested in cve-2026-87902-poc are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion (conditional RCE)☆36Oct 28, 2026Updated last week
- Next.js RCE☆53Sep 29, 2026Updated last month
- NebulaPulsar is a proof-of-concept in-memory implant framework for Java (JSP) and ASP.NET (ASPX/ASHX/ASMX) webshells, originally develope…☆47Jul 1, 2026Updated 4 months ago
- Exploit for ToolShell☆15Nov 20, 2025Updated 11 months ago
- Cockpit: Unauthenticated Remote Code Execution via SSH Command-Line Argument Injection☆15Apr 18, 2026Updated 6 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Chrome MV3 parameter/endpoint/secret harvester for authorized web security testing (GAP-style + Next.js RSC path maps)☆12Sep 9, 2026Updated last month
- NextForge — unified Next.js exploitation framework. RCE · SSRF · middleware · authorized lab only.☆18Sep 23, 2026Updated last month
- CVE-2026-32475 The Elementor Pro Forms File Upload field handles validation and file processing in two separate loops with different han…☆13Aug 21, 2026Updated 2 months ago
- PoC for CVE-2026-48907 - Joomla! JCE extension < 2.9.99.5 unauthenticated RCE☆16Jun 11, 2026Updated 4 months ago
- CVE-2025-59501 POC code☆26Nov 20, 2025Updated 11 months ago
- ☆14Apr 9, 2026Updated 6 months ago
- Hello Internet; in this playlist, we will together create a car tracking system using PHP & Mysql technology. The idea is to design a ma…☆13May 30, 2023Updated 3 years ago
- ☆38Mar 6, 2026Updated 8 months ago
- A lightweight Python tool designed to perform SYN port scans, with support for using spoofed source IP addresses as a deception technique…☆13Mar 5, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆13Nov 25, 2024Updated last year
- Silent;Call — Pre-authentication remote root on Cisco CUCM 15.x (CVSS 10.0)☆30Aug 4, 2026Updated 3 months ago
- GitHub Shortname Scanner is a tool that searches for filenames in public GitHub repositories based on a given keyword and generates a wor…☆12Feb 18, 2025Updated last year
- ☆23Jun 5, 2026Updated 5 months ago
- Clean Indirect Syscalls with Syscall Tampering.☆52Oct 25, 2026Updated 2 weeks ago
- Apache RocketMQ Arbitrary File Write Vulnerability Exploit☆47Jul 19, 2023Updated 3 years ago
- The provided exploit code leverages a stored Cross-Site Scripting (XSS) vulnerability (CVE-2024-4439) in WordPress Core versions up to 6.…☆12May 6, 2024Updated 2 years ago
- A simple recon pipeline☆40Sep 24, 2026Updated last month
- LLM Skills for Reverse Engineering Bluetooth Code☆35Aug 3, 2026Updated 3 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- An insecurely implemented and installed Windows service for emulating elevation of privileges vulnerabilities☆68Aug 25, 2022Updated 4 years ago
- A hybrid analysis framework to aid in uncovering deserialization vulnerabilities☆15Oct 13, 2024Updated 2 years ago
- Parse a magnet URI into an object☆19Oct 14, 2026Updated 3 weeks ago
- LPE Proof-of-Concept for Windows 11 abusing TrustedInstaller's Component Based Servicing (CBS) session COM object and junctions for arbit…☆60Nov 1, 2026Updated last week
- Generate obfuscated PowerShell commands using XOR logic with random keys!☆12Apr 7, 2025Updated last year
- Local privilege-escalation proof of concept for the Windows WalletService vulnerability fixed in July 2026.☆61Jul 20, 2026Updated 3 months ago
- ☆10Apr 15, 2023Updated 3 years ago
- JWTLens - Burp Suite extension for automated JWT security testing. 62 checks: passive scanning, algorithm confusion, signature bypass, …☆56Mar 19, 2026Updated 7 months ago
- SeRestorePrivilege priv esc☆14Jun 9, 2025Updated last year
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- GoBfuscator is a professional-grade obfuscation tool specifically designed for Go (Golang) source code. It provides multiple layers of pr…☆13Aug 5, 2025Updated last year
- Private Messages For WordPress☆14Aug 22, 2013Updated 13 years ago
- CVE-2024-38200 & CVE-2024-43609 - Microsoft Office NTLMv2 Disclosure Vulnerability☆147Jan 13, 2025Updated last year
- Ambiente de pentest assistido por IA integrando Claude Code + Caido MCP + 792 Skills + 35 Subagentes especializados. Do reconhecimento ao…☆15Jul 15, 2026Updated 3 months ago
- POC pre-auth RCE on Exchange☆193Aug 22, 2026Updated 2 months ago
- Encode shellcode as XML-looking data. Single-header C library with a two-stage PIC loader example.☆15Feb 11, 2026Updated 8 months ago
- An offensive-security methodology that an AI coding agent can actually execute — 88 class docs, 6 agents, 24 scripts, evidence-first vali…☆25Updated this week